DreamWin Privacy Policy

01 Who We Are

DreamWin is an online gaming platform accessible at dreamwin.org, providing interactive gaming entertainment to players in the Philippines. For the purposes of this Privacy Policy, DreamWin acts as the data controller in respect of the personal data of registered Players and platform visitors.

As data controller, DreamWin determines the purposes and means by which your personal data is processed. We are committed to handling your data responsibly, lawfully, and in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and all applicable implementing regulations.

If you have any questions about how DreamWin processes your personal data, or if you wish to exercise any of your data subject rights, please contact our Data Protection Officer using the contact details provided in Section 14 of this Policy.

02 Personal Data We Collect

DreamWin collects the following categories of personal data in connection with your use of the platform:

03 How We Collect Your Data

DreamWin collects personal data through the following means:

• Direct collection: Data you provide when registering an account, completing identity verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access the DreamWin platform, including through cookies, web beacons, and server logs. See Section 7 for more details on cookies.
• Third-party sources: Data received from payment processors (such as GCash and PayMaya) in connection with transaction processing, and from identity verification service providers used to fulfill our KYC obligations.
• Publicly available sources: In limited circumstances, DreamWin may verify information against publicly available records for fraud prevention and compliance purposes.

04 How We Use Your Personal Data

DreamWin uses your personal data for the following purposes:

• Account management: To create, maintain, and administer your DreamWin account, including processing your registration, verifying your identity, and managing your account settings.
• Transaction processing: To process deposits, withdrawals, and in-game transactions securely and accurately via your chosen payment method.
• Regulatory compliance: To fulfill our obligations under applicable Philippine laws and regulations, including anti-money laundering (AML) requirements, Know Your Customer (KYC) obligations, and responsible gaming mandates.
• Customer support: To respond to your inquiries, resolve disputes, and provide technical assistance through our support channels.
• Platform security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, and other security threats to the platform and its users.
• Responsible gaming: To monitor gaming patterns, identify potentially problematic behavior, and administer responsible gaming tools such as deposit limits and self-exclusion.
• Platform improvement: To analyze usage patterns and technical performance data to improve the DreamWin platform, fix bugs, and develop new features.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates, where you have provided consent or where we have a legitimate interest in doing so. You may opt out at any time — see Section 12.
• Legal proceedings: To establish, exercise, or defend legal claims in connection with your use of the platform.

05 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, DreamWin processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — i.e., to operate your account, process transactions, and deliver the gaming services you have registered for.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML obligations, KYC requirements, tax reporting, and regulatory reporting to relevant Philippine authorities.
• Legitimate interests: Processing carried out for DreamWin's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily in the context of marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

06 Data Sharing & Disclosure

DreamWin does not sell your personal data. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, PayMaya, BDO, BPI, Metrobank, and other payment service providers, solely for the purpose of processing your financial transactions.
• Identity verification providers: Third-party KYC and identity verification service providers engaged to assist with our regulatory compliance obligations.
• IT and platform service providers: Cloud hosting, data storage, cybersecurity, and technical support providers who process data on our behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: Philippine government agencies, regulatory bodies, and law enforcement authorities where disclosure is required by law, court order, or regulatory mandate.
• Professional advisors: Legal counsel, auditors, and other professional advisors engaged by DreamWin, subject to professional confidentiality obligations.

07 Cookies & Tracking Technologies

DreamWin uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device when you visit the platform. We use the following types of cookies:

• Essential cookies: Strictly necessary for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without affecting platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings and display options, to provide a more personalized experience.
• Analytics cookies: Used to collect aggregated, anonymized data about how Players use the platform, helping us identify areas for improvement. This data does not identify you personally.
• Security cookies: Used to detect and prevent fraudulent activity, unauthorized access attempts, and other security threats.

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies may prevent you from accessing certain features of the DreamWin platform. DreamWin does not use third-party advertising cookies or behavioral tracking cookies for external advertising purposes.

08 Data Retention

DreamWin retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

As a general guide, DreamWin applies the following retention periods:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with Philippine AML and regulatory record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by applicable financial regulations.
• Customer support communications: Retained for three (3) years from the date of the interaction, or longer if the communication relates to an ongoing dispute or legal matter.
• Technical and usage data: Retained for up to twelve (12) months from collection, after which it is aggregated or anonymized.
• Marketing consent records: Retained for the duration of your consent and for three (3) years following withdrawal of consent, as evidence of compliance.

When personal data is no longer required, DreamWin will securely delete or anonymize it in accordance with our internal data disposal procedures.

09 Data Security

DreamWin implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the DreamWin platform.
• Encryption at rest for sensitive personal data, including financial information and identity documents.
• Role-based access controls ensuring that only authorized DreamWin personnel can access personal data, and only to the extent necessary for their specific role.
• Regular security assessments, vulnerability scanning, and penetration testing of the platform's infrastructure.
• Multi-factor authentication requirements for administrative access to systems containing personal data.
• Comprehensive incident response procedures to detect, contain, and report data security incidents in a timely manner.

10 Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by DreamWin:

• Right to be informed: The right to be told what personal data DreamWin collects about you and how it is used — which is the primary purpose of this Privacy Policy.
• Right of access: The right to request a copy of the personal data DreamWin holds about you, along with information about how it is processed.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data held about you. You can update most account information directly through your account settings.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to DreamWin's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive a copy of your personal data in a structured, commonly used, machine-readable format, where technically feasible.
• Right to withdraw consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact DreamWin's Data Protection Officer using the contact details in Section 14. We will respond to all verified requests within thirty (30) days. In complex cases, this period may be extended by a further thirty (30) days, in which case we will notify you of the extension and the reason for it.

DreamWin will not charge a fee for exercising your data subject rights unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

11 Children & Minors

The DreamWin platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. DreamWin does not knowingly collect personal data from individuals under the age of 21.

If DreamWin becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. Any funds deposited by an underage user will be handled in accordance with our Terms & Conditions and applicable regulatory requirements.

If you are a parent or guardian and believe that your child has registered an account on DreamWin, please contact our support team immediately so that we can investigate and take appropriate action.

12 Marketing Communications

DreamWin may send you promotional emails, SMS notifications, and in-platform messages about bonuses, new games, and special offers. We will only send you marketing communications where you have provided consent at registration or where we have a legitimate interest in keeping you informed about relevant platform updates.

You can opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link included in any marketing email from DreamWin.
• Updating your communication preferences in your account settings.
• Contacting our support team and requesting removal from marketing lists.

Please note that opting out of marketing communications will not affect transactional communications — DreamWin will continue to send you account-related notifications such as deposit confirmations, withdrawal updates, and security alerts, as these are necessary for the operation of your account.

13 Updates to This Privacy Policy

DreamWin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or platform features. When material changes are made, we will notify registered Players via the email address associated with their account and/or by displaying a prominent notice on the platform prior to the changes taking effect.

The updated Privacy Policy will be published at dreamwin.org/privacy-policy with a revised effective date. Your continued use of the DreamWin platform after the effective date of any update constitutes your acknowledgment of the revised Policy. We encourage you to review this page periodically to stay informed about how DreamWin protects your personal data.

14 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or DreamWin's handling of your personal data, please contact our Data Protection Officer through the following channels:

• Live Chat: Available 24/7 directly on the DreamWin platform. This is the fastest way to reach our team for urgent privacy concerns.
• Email: [email protected] — responses within 48 hours on business days.
• FAQ: Visit our FAQ page for answers to common questions about account data and privacy settings.

If you are not satisfied with DreamWin's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). The NPC is the independent regulatory body responsible for administering and enforcing the Data Privacy Act of 2012 in the Philippines.